PHP - Possible To Output Text To Browser And Then Download File?

Dear PHPFreak members,
I have been searching a solution for serving a file download via my website. The file to be downloaded is actually on a remote server.

What i need is a code that serves as a download medium without actually downloading the file to my web server. Something like masking file url 

Can anyone help me with it ???
Have been trying this since days. But no solution till date.

Hi Guys

Another noob question.

I have written a script to create a csv file from a mysql query. Bread and butter you might think...

The script i've written (based on reading a few bits and a few bits there) creates the csv file in the same directory as the php script. I don't really want this to happen because the data it's pulling is a little sensitive.

So  my questions:

How can i stop the csv from storing itself locally? How can i output the csv directly to the browser - i.e. to initiate a download automatically You'll notice that in the code I have a while loop within which i run a function to trim the data results as they are pulled down before placing them in the csv. I suspect that recursively calling this function is probably not the most efficient way of doing it. Any suggestions on how this should be done? I don't expect you to code it (unless you really want to) just an explanation to point me in the right direction would be fab.
Any help would be very appreciated.

Drongo

Code: [Select]
<?php


require_once("config.php");



$select = "SELECT * FROM members";  

$export = mysql_query ( $select ) 
or die ( "Sql error : " . mysql_error( ) );  


$fields = mysql_num_fields ( $export );  

for ( $i = 0; $i < $fields; $i++ ) 

{    
 $header .= mysql_field_name( $export , $i ) . ","; }


echo $header;

$headings = explode(",", $header);


//Set headers in first line of csv.

$fp = fopen('test.csv', 'w');
 
    fputcsv($fp, $headings);
fclose($fp);








// Function to trim all values. Remember the pass by reference to change original value.

function trim_all(&$value)
{ 
  if (is_array($value))
  {   
array_walk_recursive($value, 'trim_all');
  }
  else
  {   
$value = trim(str_replace("\r\n", "\n", $value));
  }
}





//open file for writing
$dp = fopen('test.csv', 'a+');
                                   
                               // ignore this line
mysql_data_seek($export, 0);

// while loop runs trim on data and stores each array as csv row
while($rows = mysql_fetch_row($export))
  {
  array_walk_recursive($rows, 'trim_all');
  print_r($rows);
  fputcsv($dp, $rows);
  }
  
fclose($dp);



?>

Hi friends,    Another security issue but this time its regarding outputting data from a DB to a browser. Please have a look at the code below which displays some output fetched from a DB and sends it to a browser.    1. If I just wish to display this output on a screen and not provide the user with any buttons or hyperlinks to interact with the information, would I still need to sanitize the output before echoing it to the screen ?    2. If I was to make at least one of the fields a hyperlink, so that I could then display some related information on another webpage, what security concerns would I need to address in my code?   3. If I was to add a button against each of these records, on each row, and then select some related  information on another webpage after processing the button handler, what would be the security concerns that I should address for the code below.    Thanks very much.

<table>

<tr>
<th> S.No. </th>
<th> Name </th>
<th> Age </th>
<th> City </th>
<th> Cell </th>
<th> Email</th>
</tr>

<?php 
$cnt = 1;
while ($row = mysqli_fetch_array($result, MYSQLI_ASSOC))
{
echo "<tr>";
echo "<td>".$cnt++."</td>";
echo "<td>".$row['Name']. "</td>";
echo "<td>".$row['Age']. "</td>";
echo "<td>".$row['City']. "</td>";
echo "<td>".$row['Cell']. "</td>";
echo "<td>".$row['Email']. "</td>";
echo "</tr>";
}
?>
</table>

im testing the following script and it wont send 1 2 3 until the script has finished executing.

What can i do to flush the buffer after every echo statement??

<?php 

echo "1";
ob_flush();flush();
sleep(5);
echo "2";
ob_flush();flush();
sleep(5);
echo "3";
ob_flush();flush();

?>

I've written the following code:

Code: [Select]
<?php
echo '<img src="Sheph.png" />';


function Wad(){
if (file_exists("Sheph.png")) {
    header('Content-Description: File Transfer');
    header('Content-Type: application/octet-stream');
    header('Content-Disposition: attachment; filename='.basename("Sheph.png"));
    header('Content-Transfer-Encoding: binary');
    header('Expires: 0');
    header('Cache-Control: must-revalidate');
    header('Pragma: public');
    header('Content-Length: ' . filesize("Sheph.png"));
    ob_clean();
    flush();
    readfile("Sheph.png");
    exit;
}
}
Wad();
?>
What I want to do is show the image AND show a file download window.
The problem is that it shows the download window but the image doesn't appear. and if I comment the function and keep the echo part only,the image appears normally.

What's wrong ? 

Hello!

I'm making a interface in a website do manage files in a ftp hosted on other server.

I'm using the function ftp_get() to download a file but I've tried different aways but I dosent seem do be able to download the file directly from the FTP server do the user the only way it works is if I download the file to the website server first then to the client.

Is there any way that I can download the file directly to the user without have to hosting it permanently on the website server?

Thank you

Hi all,

I'm trying to make a PHP script that downloads a file off a remote FTP server and serves the file to the visitor with a limited download speed.

Right now I'm using fopen() like this:

Code: [Select]
$path = "ftp://".$username.":".$password."@".$server."/";
$fullPath = ($path.$fileName);

$speed = 400; // 400 kb/s download rate

    header("Cache-control: private");
    header("Content-Type: application/octet-stream");
    //header("Content-Length: ".filesize($fullPath));
    header("Content-Disposition: filename=\"".$fileName."\"");

    flush();

   $fd = fopen($fullPath, "r");
   while(!feof($fd)) {
         echo fread($fd, round($speed*1024));
       flush();
       sleep(1);
   }
   fclose ($fd);


The file does download but with the wrong speed (8kb/s), does anyone know why?

When I run the same code with a local file instead of a file on FTP it works fine and downloads at the speed I set it to..

Thanks

Hi PHP freaks!!   I have manage to make a script to upload file in database and its working. I will share to you the codes so for other viewers and readers to use also.

if($result){
			if($_FILES['LRCard']['name'] != ""){
				$filename = $_FILES['LRCard']['name'];
				$ext = strrchr($filename,".");
				$LRCardname = $student_id;
				$LRCardname .="_". $filename; 
				if($ext ==".jpg" || $ext ==".jpeg" || $ext ==".JPG" || $ext ==".JPEG" || $ext ==".gif" || $ext ==".GIF"){
					$size = $_FILES['LRCard']['size'];
					if($size > 0 && $size < 5000000){
						$archive_dir = "LRCards";
						$userfile_tmp_name = $_FILES['LRCard']['tmp_name'];
						if(move_uploaded_file($userfile_tmp_name, "$archive_dir/$LRCardname")){
							/*
								if LRC is successfully uploaded then LRC is stored in database.
							*/
							mysql_query("update student_information set LRCard='$LRCardname' where student_id='$student_id'", $link_id); 
							$flag = "success"; 
							if(mysql_error()!=null){
								die(mysql_error());
							}

						}
						else{
							if(file_exists('LRCard/' . $LRCardname)) {
								unlink('LRCards/' . $LRCardname); 
							}
							rollbackData();
						}
					}
					else{
						if(file_exists('LRCards/' . $LRCardname)) {
							unlink('LRCard/' . $LRCardname); 
						}
						rollbackData();
						die("You can upload LRCard of 5 MB size only. Please, try again.");
					}
				}
				else{
					if(file_exists('LRCards/' . $LRCardname)) {
						unlink('LRCards/' . $LRCardname); 
					}
					rollbackData();
					die("You can upload LRCard of .jpg, .jpeg, .gif extensions only. Please, try again. ");
				}
			} 	
		}
		else{
			$flag="error";
		}
		if($flag == "success"){
			mysql_query(" COMMIT ");
			$flag="success";
			if(mysql_error() != null){
				die(mysql_error());
			}
	    }

Now, my problem is how to make a Php script to DOWNLOAD this uploaded file considering the 1. file path 2. file name 3. file extension. 4. student_id (to determine the specific file from a specific student)   My plan is to make a download button which hyperlink to download.php and after clicking that button the specified file to a specific student id will automatically be downloaded by the browser.  

I'm wanting to have users able to download a file, but I'm wanting it to be a file that only users who are logged in can download. Basically, I don't want a user to be able to enter the URL and download it while not being logged in. Does anyone know what I would use to do this? Thanks.

Hello everyone!

 I'm somewhat of a newb in this so anyways I have this script and I try to force a browser to download a file when someone hits a download button.

here is what I'm trying:

   header('Content-Type: application-download');
   header('Content-Disposition: attachment; filename=' .basename($dl_id));
   readfile($dl_id);

It seems to work in Chrome, Firefox, but it doesn't work in IE

Any suggestions?

The other day I noticed someone had post something like this, well this was actually the solution to the problem. But it got me thinking about a project of mine that I am working on and the need to pump out a downloadable file. We are storing most of the files in a database using base64 encoding the 2 key types of files we are storing are images and PDF's mostly pdf's anyway where I am wanting to go with this is, is there anyway to take the base64 encoded file and get it to download through this, or am I tackling the idea in the wrong way?

<?php
$filename = 'somename.txt'; //this would obviously be changed according to the file type we would output

$data =<<<DATA
I know my data would go here for the given file once decoded.
DATA;

header('Content-Description: File Transfer');
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename=' . $filename);
header('Content-Transfer-Encoding: binary');
header('Expires: 0');
header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
header('Pragma: public');
header('Content-Length: ' . strlen($data));
echo $data;
?>

Hiya guys

After getting everything else working how I expected, I'm sort of struggling on the last step. Downloading

I have an upload.php file that allows me to upload a file to Mysql, the fields available a

upid - Primary
id - Need to link this to the logged on user id name
type
size content   The upload works perfectly

Can anyone help with implmenting it to the profile.php (1st page after login)

On profile page I have:

Welcome "username" from Session
Dynamic Table display his user id, username and password at the moment, this will be changed as not needed tho. I am using the sessions MM_Username to pass from the login

The table for Login looks like:

id - primary username password

I assume that if I can copy the ID from login and put it in ID in Upload and add colums to dynamic table to show the upload file, will this make that file only available to logged in user?

Cheers

Hi there,

I have a cronjob for PHP which generates a table with dynamic data and this table is exported to excel when run. When i have one table it downloads one excel file.

I want to download multiple excel files using a for loop. Please Help... Any suggestions will be helpful..

Thank you,
Regards,
Rohit

The following code works fine when using chrome or firefox, but fails with IE.
Error: Requested site is either unavailable or cannot be found.

Question: Does anyone see anything here that is a known bug with IE that I don't know about?

Code: [Select]
public function download(){
if($this->validateFile()){
if(!headers_sent()){
header('Content-type: '.$this->getType());
header('Content-Disposition: attachment; filename="'.$this->name.'"');
readfile($this->file);
} else{
echo 'Headers have already been sent and are preventing the file download from taking place.';
}
return true;
}
return false;
}

//I felt this function might be relevant to the issue.  I know, it's kind of a ghetto function, I'll improve on it some other time though.

private function getType(){
$types=array( 'txt' => 'text/plain',
'mp3' => 'audio/x-mp3',
'jpg' => 'image/jpeg',
'jpeg' => 'image/jpeg',
'gif' => 'image/gif',
'png' => 'image/png',
'doc' => 'application/msword',
'swf' => 'application/x-shockwave-flash',
'flv' => 'video/flv',
'mpg' => 'video/mpeg',
'mpeg' => 'video/mpeg',
'avi' => 'video/x-msvideo',
'rtf' => 'application/rtf',
'pdf' => 'application/pdf',
'zip' => 'application/zip',
'exe' => 'application/octet-stream',
'xls' => 'application/msexcel',
'xlsxl' => 'application/msexcel');
if(!$types[$this->getExt()]==''){
return $types[$this->getExt()];
}
return 'application/octet-stream';
}

On PHP 5.2.14.

I want to make files downloadable from my website. This seems easy enough:
<?php
$file = "downloads/someFile.txt";
// Set headers
header( "Content-Description: File Transfer" );
header( "Content-Type: application/force-download");
header( "Content-Length: " . filesize( $filename ) );
header( "Content-Disposition: attachment; filename=$file");
// header( "Content-Transfer-Encoding: binary");
readfile( $file );
unlink( $file );
?>
You'll notice, however, that I have "unlink" at the end of this file. That's exactly what I want: to remove the file from the server once it has been downloaded, to prevent anyone else from downloading it.

Here's the conundrum: When the user navigates to this URL, browsers offer the choice of Open/Save/Cancel. I don't want users to "open", and if the user presses "cancel", well then I probably don't really want the file deleted.

In short: I want the file SAVED, only. And I want to delete the file immediately after it has been downloaded.

Thoughts?